Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/8545ED852E6BA88695268C3F3DB0FF2B57345AAD.mft
File:                     8545ED852E6BA88695268C3F3DB0FF2B57345AAD.mft (raw, json)
Hash identifier:          b2Iq7qj1kTdxpeAC/luyrKPvDasdYOJ4IzwboPgnHSo=
Subject key identifier:   1F:60:2C:C9:58:40:68:36:9B:96:19:66:C8:BC:3E:2B:18:DF:56:27
Authority key identifier: 85:45:ED:85:2E:6B:A8:86:95:26:8C:3F:3D:B0:FF:2B:57:34:5A:AD
Certificate issuer:       /CN=8545ED852E6BA88695268C3F3DB0FF2B57345AAD
Certificate serial:       12891D2C9B3CD039675CC155AE3D968B261F5689
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8545ED852E6BA88695268C3F3DB0FF2B57345AAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/8545ED852E6BA88695268C3F3DB0FF2B57345AAD.mft
Manifest number:          23
Signing time:             Sun 14 Apr 2024 18:36:40 +0000
Manifest this update:     Sun 14 Apr 2024 18:31:40 +0000
Manifest next update:     Mon 15 Apr 2024 19:49:40 +0000
Files and hashes:         1: 323830343a333136343a383030303a3a2f33332d3333203d3e20323635303131.roa (hash: i2mnhnxTWIQUp5oCwhl2g+9J5TAABHEb1YnmQp6uOsY=)
                          2: 3137302e38342e3134382e302f32322d3232203d3e20323635303131.roa (hash: yE94eDrIPwU5YJ7rE2kbGwcEwNf8A49okFTX/CpUFFY=)
                          3: 8545ED852E6BA88695268C3F3DB0FF2B57345AAD.crl (hash: OhDP+9cxXRHwLaopPmkASL4H0A6HkzE6zVNzhLRTTN4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:89:1d:2c:9b:3c:d0:39:67:5c:c1:55:ae:3d:96:8b:26:1f:56:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8545ED852E6BA88695268C3F3DB0FF2B57345AAD
        Validity
            Not Before: Apr 14 18:31:40 2024 GMT
            Not After : Apr 15 19:49:40 2024 GMT
        Subject: CN=1F602CC9584068369B961966C8BC3E2B18DF5627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b5:5a:6c:60:f6:92:26:25:a0:46:53:41:8b:
                    5c:9e:b5:8e:d3:28:a2:58:6d:85:8d:95:53:1b:35:
                    d8:93:e7:b4:cf:44:8f:4f:19:76:bc:24:29:c8:c1:
                    e4:84:4c:a7:17:ec:f8:6e:60:95:c1:62:aa:b4:b5:
                    4c:ad:01:b5:0a:4b:ff:01:3b:4f:44:23:50:a9:b6:
                    f6:73:85:5b:1f:bb:b6:90:8c:2c:a3:b5:87:9f:e1:
                    a8:66:4a:e9:b1:c4:1d:72:e2:ce:b5:81:6d:2c:f4:
                    87:ff:f2:9e:e4:05:ec:60:a3:4b:ea:0e:9e:73:75:
                    fe:e4:fa:5c:c7:1b:a0:80:39:76:01:dd:aa:04:0a:
                    7a:1d:a9:f2:8d:3d:94:2b:ab:87:f6:e5:b1:c6:a5:
                    df:65:74:d3:7f:91:41:31:32:73:90:9f:d1:b5:de:
                    90:03:e3:61:41:fd:5e:ed:7c:b7:dc:a1:c3:f7:94:
                    5c:63:33:d3:db:84:41:08:e1:88:0e:8e:ab:d0:4c:
                    52:d4:d3:fe:f1:33:e5:27:48:3a:3b:32:bf:24:d3:
                    20:69:fc:ad:c1:c6:47:0a:15:3c:03:b3:fb:f1:21:
                    07:fa:88:9d:ce:b6:53:f3:4b:40:28:41:44:a7:a3:
                    89:ab:30:ab:43:45:82:d2:48:28:b6:a8:3d:9f:8b:
                    33:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:60:2C:C9:58:40:68:36:9B:96:19:66:C8:BC:3E:2B:18:DF:56:27
            X509v3 Authority Key Identifier:
                keyid:85:45:ED:85:2E:6B:A8:86:95:26:8C:3F:3D:B0:FF:2B:57:34:5A:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/8545ED852E6BA88695268C3F3DB0FF2B57345AAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8545ED852E6BA88695268C3F3DB0FF2B57345AAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AWd4NwJU5Mxf3yeQ3iJixyB2nzic1v84bq2hs9EqQhg/0/8545ED852E6BA88695268C3F3DB0FF2B57345AAD.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:03:cd:38:11:b1:5e:99:7c:73:32:c7:e9:63:7d:b2:d9:9c:
         54:d5:6a:b8:93:6f:93:e0:c9:c1:b3:3f:12:0a:f0:c2:7a:16:
         3a:e8:65:62:0d:51:35:5f:73:97:50:d0:59:bd:ad:61:6c:ee:
         d3:c0:21:af:43:a4:90:99:4d:f7:03:30:b8:d7:7e:cb:06:dd:
         47:ef:da:de:aa:3e:7f:51:55:7b:c0:74:6c:85:48:d6:2c:3d:
         65:25:a6:1d:46:f5:b6:e4:b2:55:29:46:4a:aa:70:ee:c6:7a:
         90:e7:c7:e4:cd:26:d7:37:8e:a4:98:35:e3:f1:68:fe:b1:5d:
         26:30:89:2b:98:bd:f2:0d:6c:72:9a:0f:8d:15:e7:e3:58:e7:
         c3:d0:6f:5d:df:c4:47:0a:8e:0c:60:d3:11:a4:2c:f9:62:5c:
         c9:59:b1:58:df:31:99:d0:87:8a:05:6a:da:78:65:41:10:3e:
         a3:a8:bf:d8:70:a8:5d:f3:55:b0:f6:7c:2f:b5:82:5f:b2:7b:
         01:2c:fd:e2:72:b3:8c:9f:e7:9c:86:7a:0f:4c:8f:bc:cc:f7:
         aa:5f:b9:ad:0d:c4:a6:a3:96:12:2f:e2:94:f5:ec:c3:82:4b:
         e8:3a:81:9d:fa:b2:10:91:d7:35:3c:0c:d5:d8:23:f2:37:6d:
         ac:0c:cd:b2
-----BEGIN CERTIFICATE-----
MIIFTDCCBDSgAwIBAgIUEokdLJs80DlnXMFVrj2WiyYfVokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU0NUVEODUyRTZCQTg4Njk1MjY4QzNGM0RCMEZGMkI1
NzM0NUFBRDAeFw0yNDA0MTQxODMxNDBaFw0yNDA0MTUxOTQ5NDBaMDMxMTAvBgNV
BAMTKDFGNjAyQ0M5NTg0MDY4MzY5Qjk2MTk2NkM4QkMzRTJCMThERjU2MjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrtVpsYPaSJiWgRlNBi1yetY7T
KKJYbYWNlVMbNdiT57TPRI9PGXa8JCnIweSETKcX7PhuYJXBYqq0tUytAbUKS/8B
O09EI1CptvZzhVsfu7aQjCyjtYef4ahmSumxxB1y4s61gW0s9If/8p7kBexgo0vq
Dp5zdf7k+lzHG6CAOXYB3aoECnodqfKNPZQrq4f25bHGpd9ldNN/kUExMnOQn9G1
3pAD42FB/V7tfLfcocP3lFxjM9PbhEEI4YgOjqvQTFLU0/7xM+UnSDo7Mr8k0yBp
/K3BxkcKFTwDs/vxIQf6iJ3OtlPzS0AoQUSno4mrMKtDRYLSSCi2qD2fizNxAgMB
AAGjggJWMIICUjAdBgNVHQ4EFgQUH2AsyVhAaDablhlmyLw+KxjfVicwHwYDVR0j
BBgwFoAUhUXthS5rqIaVJow/PbD/K1c0Wq0wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9BV2Q0TndKVTVNeGYzeWVRM2lKaXh5QjJuemljMXY4NGJxMmhzOUVxUWhn
LzAvODU0NUVEODUyRTZCQTg4Njk1MjY4QzNGM0RCMEZGMkI1NzM0NUFBRC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC84NTQ1RUQ4NTJFNkJBODg2OTUy
NjhDM0YzREIwRkYyQjU3MzQ1QUFELmNlcjCBnAYIKwYBBQUHAQsEgY8wgYwwgYkG
CCsGAQUFBzALhn1yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0FX
ZDROd0pVNU14ZjN5ZVEzaUppeHlCMm56aWMxdjg0YnEyaHM5RXFRaGcvMC84NTQ1
RUQ4NTJFNkJBODg2OTUyNjhDM0YzREIwRkYyQjU3MzQ1QUFELm1mdDAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
iwPNOBGxXpl8czLH6WN9stmcVNVquJNvk+DJwbM/EgrwwnoWOuhlYg1RNV9zl1DQ
Wb2tYWzu08Ahr0OkkJlN9wMwuNd+ywbdR+/a3qo+f1FVe8B0bIVI1iw9ZSWmHUb1
tuSyVSlGSqpw7sZ6kOfH5M0m1zeOpJg14/Fo/rFdJjCJK5i98g1scpoPjRXn41jn
w9BvXd/ERwqODGDTEaQs+WJcyVmxWN8xmdCHigVq2nhlQRA+o6i/2HCoXfNVsPZ8
L7WCX7J7ASz94nKzjJ/nnIZ6D0yPvMz3ql+5rQ3EpqOWEi/ilPXsw4JL6DqBnfqy
EJHXNTwM1dgj8jdtrAzNsg==
-----END CERTIFICATE-----